KB Article #180797

ICAP: Exit Code 14:ICAP scan DENY file error received for large files

Problem

Getting error Exit Code 14:ICAP scan DENY file! when trying to upload large (10+ GBs) files to SecureTransport.


Resolution

When scanning incoming to SecureTransport files with an ICAP server, large files sometimes fail to complete successfully with an Exit Code 14:ICAP scan DENY file! error message observed in File Tracking. The following ERROR message is also observed in the Server Log:


ERROR    TM    EventQueueWorker-271    java.net.SocketTimeoutException: Read timed out    ICAPUtils.java    com.axway.st.server.icap.common.ICAPUtils    scan    223    UNKNOWN    com.axway.st.server.icap.client.IcapServiceException: java.net.SocketTimeoutException: Read timed out


In case your environment experiences transfers of larger files (10 GBs or above), it is a good practice to increase both connection as well as any ICAP POST timeouts on the ICAP server to 5 minutes or more.